10-Oct-2026 SonicWall, AnyDesk and ShinyHunters Lead Exploit News

Hacked dAily is the first AI-driven cybersecurity podcast, created by Cytadel Cyber and published daily. It delivers concise, decision-ready intelligence for CISOs, security leaders, and executives. 1. **SonicWall SMA1000 attacks:** Attackers are probing SMA1000 appliances for CVE-2026-102255, a critical flaw that enables unauthenticated internal requests and unauthorized actions. Because these gateways support enterprise, government, and MSP remote access, defenders should prioritise patching and review exposure. 2. **ShinyHunters investigation:** The FBI arrested Canadian cybersecurity and ransomware-negotiation executive Edward Dubrovsky over alleged cyber extortion and conspiracy linked to ShinyHunters. The case highlights growing law-enforcement scrutiny of ransomware intermediaries as the group’s extortion activity and exposure of sensitive FBI data intensify. 3. **Security verification disruption:** A security verification page temporarily blocked access before allowing the site to load. The incident illustrates the operational trade-off between anti-bot protection and reliable access for legitimate users, readers, and automated services. 4. **Malicious Claude ads:** Researchers found Google and Bing ads redirecting users searching for Claude to a fake macOS installer that uses a convincing command to execute malicious content. The Adception campaign shows how trusted brands, advertising infrastructure, and cloaking can bypass controls and enable low-friction ClickFix-style attacks. 5. **AnyDesk Linux exploit:** Researchers released a working exploit for an unpatched-in-practice AnyDesk Linux flaw that can provide root access before authentication. Organisations should upgrade to version 8.0.3 or later, or restrict TCP port 7070, while recognising that incomplete advisories can delay risk assessment and response. Hacked Daily is sponsored by Cytadel, an offensive cyber assurance company specialising in AI-powered attacks. Cytadel’s expert-led Red Team Assessments follow real attack chains across people, identity and technology to verify whether they can become AI fraud or ransomware disruption. We verify your defences before attackers do. Learn more at cytadel.co.uk.